Bitcoin Forum

Haven't seen this posted here but it sounds serious.

According to the article (https://blog.malwarebytes.com/cybercrime/exploits/2019/03/google-chrome-zero-day-now-is-the-time-to-update-and-restart-your-browser/), "we are talking about a full exploitation that escapes the sandbox and leads to remote code execution". This means that it allows the attacker to access someone else's computing device and make changes, no matter where the device is geographically located.

How to update google chrome? See this article (https://appuals.com/chrome-zero-day-exploit-patched-users-should-update-immediately/).

Cheers.

Although the exploit was really detected and resolved over a week ago (see  Disclosing vulnerabilities to protect users across platforms (https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html)), and chrome’s auto-update should have dealt with it, not everybody has the auto-update settings active.

Although the official above link does not reference it, various alternative articles on the topic indicate that the browser needs to be restarted in order for the fix to be effective. The update should be in place if your chrome version is 72.0.3626.121 or above.

Updating software is always a good security practice.

One more important thing is to use a non administrator account for daily use. So these attacks cannot do much

Strangely my client was already updated before I even checked. When was the last stable release rolled out?

I use Google Chrome only in time when Ledger Nano S was using them for their apps, but for me personally much better browser is Mozilla Firefox, Opera or recently Brave. Every browser should have automatic notification about updates, and I know Firefox have such features so I never miss any update. What is even stranger that Chrome is not have automatic restart after update, this should be something that happens automatically, and Firefox is doing that every time after update, without user intervention.

My advice is that after browser is started always check manually for update, in Firefox that option is under Help tab / About Firefox.

I am not sure whether other browsers based on Chrome/Chromium core engine are also affected with this critical vulnerability, so no matter which browser you are using make update to be safe.

It's due to auto update or maybe you already installed the latest version. See dmr post above, the issue was made public last week and fixed.

Tor and Brave browsers are my choice.
I don't like Google Chrome due to their bad history on security.
Serious issues rarely happen, but when it happen, it is certainly very serious.
I meant the significance of issues when it occur

I did, but that was weeks ago. Still, I'm thankful for it.

It should be on a weekly basis as long as there is a new update we are advice to update our browsers always in other to keep up to date with the security and other user interface features on the browser, I have been using Google crome for quite some time now and my crome get automatic update any time an update is ready from the developer's.

I don't like Chrome because of privacy.

Google tracks everything you do online, if you let them. Ads, Google Analytics, APIs, cookies, etc. You don't even have to use any Google products or services and they are tracking you. If you have any Google accounts, then all this data is logged against your identity. Any Google searches, emails, documents, locations, directions, shopping, translation, etc, etc, etc. It is all used to build up a profile of you, which is then shared and sold to anyone and everyone. Using Chrome just makes it even easier for them. Everything you do is tracked, even down to what you type in to the URL bar. Google and Chrome are privacy nightmares.

At the very least switch to Firefox.

Have to agree. Don't like google in general. For those looking to move away from google services, this is a good guide (https://medium.com/@duckduckgo/google-alternatives-e6b3d8f40de2).

This sounds VERY serious. Already switched from chrome when they announced that they will block all ad-blockers.
Bad move from their part, this is very critical bug that can let you lost your crypto, update/change browser at once.

If you like Chrome, you would like Brave, too. And it has all the privacy features you may want + Chrome plugins compatibility. Upgrade is a good time for a change :-)

Additional you support your favourite websites with automatic BAT donations (you get a couple of BATs for free every month which you can donate).

That is a good resource, which I hadn't seen before. Thanks for sharing.

I would, however, be very cautious with their suggestion of switching to iOS. While Apple might be marginally better than Google in terms of privacy, they are still awful on the grand scale of things. For example, in addition to the usual web tracking, it also emerged a few years ago that Apple tracks iPhone users' location in real time, and has the right as per their Terms of Service to sell that data to third parties.

Sorry for off-topic reply:
Is there anyone having a problem with the sudden shutdown of the Chrome browser after the update? The problem is automatically and randomly closed for no reason. I have updated Chrome version and made sure there are no viruses in my device.

I do not like Firefox as an alternative to Chrome but maybe give Brave browser a change, it's the first time I try it.

None so far. Unless a patch rolls out, better make sure "Keep tabs after Chrome closes" is checked

I check updates for my browsers manually several times per week. They are updated automatically also but I have never noticed either Chrome or Firefox restart manually after downloading an update. That would be bad if your browser just closes while you are in the middle of work. Following a manual update both browsers have a button to click on to restart it.

Fully agree with this. For those interested in how Apple doesn't give a rat's rear about your privacy.

https://www.youtube.com/watch?v=shxTTon5lfs (https://www.youtube.com/watch?v=shxTTon5lfs)

Also, as a side note. Google started off with the "don't be evil" slogan... It dropped it and has since begun engaged in manipulating search engine results. A good video on this is below.

https://www.youtube.com/watch?v=SrsCEbi5N7Y

I did it. I can not do without it.
It's good for translation and browsing.
 It is safe for me.

Maybe it's spam, maybe it's not. But imagine if everybody came to that thread saying "thanks! never heard of it"; It's basically and useless comment. It's almost the same as the crap users in the Bounty board posting "good project" all day. People are sick of those.

Brave (and Opera, Vivaldi, etc) come from Chromium, so you are using it one way or another... Try to find out which Chromium version is your Brave browser going to chrome://settings/help (http://chrome://settings/help) it clearly shows it there. If you are in a version at risk (under 72.0.3626.121), update it immediately.

Same thing with Opera: opera://about/ (http://opera://about/) and all chromium browsers out there.

Tor-browser is Firefox based, thankfully.

Could someone please advise on how to sync all Google services with Tor? I mean drive/docs, etc.  ???

Duckduckgo is known to share about privacy and security articles over any blog or mailing list. But suggestion about migrating to IOS is really questionable. The solution should be using third parties custom ROM like LineageOS[1] who is known for privacy purpose instead of migrating to a closed sourced OS.

[1] https://www.privacytools.io/#mobile_os

Sucks for people running with an outdated OS, tried updating now my old Windows Vista laptop and it showed a version way below 72.xx, after I successfully installed the new Chrome update it didn't changed the version of my Chrome browser. It seems like I'll be uninstalling my chrome browser from my laptop by now, but before that I'll try to reinstall it to see if anything change from that kind of install. This is also a heads up for people with old Windows laptop Chrome has been notifying me that they will stop supporting Windows XP and Vista soon.

Windows Vista's support stopped at 2017; Windows XP was at 2014. It seems pretty obvious that after 2 years and 5 years with no support or updates, the apps would stop caring about those OS. There must be tons of vulnerabilities and other issues with them.

And yet Windows XP still has something like 6% of the total market share, which equates to over 100 million individual computers. I know from personal experience that several government agencies and private companies depend on old and outdated software that will only run on Windows XP, but it's a massive security risk to continue to use unsupported operating systems.

If you can't afford to upgrade to Windows 8 or 10, or you don't want to because they are a privacy nightmare and spy on you constantly, do yourself a favor and switch to Linux.

You'd be surprised that many ATMs are still on XP. There have been cases of those things getting compromised.

https://www.huffingtonpost.in/2018/06/26/atms-could-be-hacked-because-banks-havent-updated-windows-despite-5-years-of-warnings_a_23468813/